CVE-2025-2752

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://github.com/assimp/assimp/issues/6013 Exploit Issue Tracking
https://github.com/assimp/assimp/issues/6013#issue-2877371176 Exploit Issue Tracking
https://vuldb.com/?ctiid.300857 Permissions Required VDB Entry
https://vuldb.com/?id.300857 Third Party Advisory VDB Entry
https://vuldb.com/?submit.517786 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*

History

17 Jul 2025, 21:50

Type Values Removed Values Added
CPE cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*
First Time Assimp assimp
Assimp
References () https://github.com/assimp/assimp/issues/6013 - () https://github.com/assimp/assimp/issues/6013 - Exploit, Issue Tracking
References () https://github.com/assimp/assimp/issues/6013#issue-2877371176 - () https://github.com/assimp/assimp/issues/6013#issue-2877371176 - Exploit, Issue Tracking
References () https://vuldb.com/?ctiid.300857 - () https://vuldb.com/?ctiid.300857 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.300857 - () https://vuldb.com/?id.300857 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.517786 - () https://vuldb.com/?submit.517786 - Third Party Advisory, VDB Entry

27 Mar 2025, 16:45

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en Open Asset Import Library Assimp 5.4.3, clasificada como problemática. Este problema afecta a la función fast_atoreal_move de la librería include/assimp/fast_atof.h del componente CSM File Handler. La manipulación provoca lecturas fuera de los límites. El ataque puede iniciarse remotamente. Se ha hecho público el exploit y puede que sea utilizado.

25 Mar 2025, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-25 08:15

Updated : 2025-07-17 21:50


NVD link : CVE-2025-2752

Mitre link : CVE-2025-2752

CVE.ORG link : CVE-2025-2752


JSON object : View

Products Affected

assimp

  • assimp
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125

Out-of-bounds Read